@frontmcp/sdk 1.7.2 → 1.8.1

package/front-mcp/front-mcp.providers.d.ts

@@ -1,3556 +1,3 @@
-import { FrontMcpServer, type FrontMcpConfigType, type ProviderValueType } from '../common';
-import { FrontMcpContextStorage } from '../context';
-export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType): (typeof FrontMcpContextStorage | ProviderValueType<{
-    info: {
-        name: string;
-        version: string;
-        title?: string | undefined;
-        websiteUrl?: string | undefined;
-        icons?: {
-            src: string;
-            mimeType?: string | undefined;
-            sizes?: string[] | undefined;
-            theme?: "light" | "dark" | undefined;
-        }[] | undefined;
-    };
-    providers: import("@frontmcp/di").Type<unknown>[];
-    tools: (string | import("@frontmcp/di").Type<unknown>)[];
-    resources: import("@frontmcp/di").Type<unknown>[];
-    skills: import("@frontmcp/di").Type<unknown>[];
-    plugins: import("@frontmcp/di").Type<unknown>[];
-    apps: import("@frontmcp/di").Type<unknown>[];
-    serve: boolean;
-    transport: {
-        sessionMode: "stateful" | "stateless" | import("zod/v4/core").$InferOuterFunctionType<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>;
-        protocol: "modern" | "legacy" | "stateless-api" | "full" | {
-            sse?: boolean | undefined;
-            streamable?: boolean | undefined;
-            json?: boolean | undefined;
-            stateless?: boolean | undefined;
-            legacy?: boolean | undefined;
-            strictSession?: boolean | undefined;
-        };
-        distributedMode: boolean | "auto";
-        platformDetection?: {
-            customOnly: boolean;
-            mappings?: {
-                pattern: string | RegExp;
-                platform: "unknown" | "continue" | "openai" | "claude" | "gemini" | "cursor" | "cody" | "generic-mcp" | "ext-apps";
-            }[] | undefined;
-        } | undefined;
-        defaultProtocolVersion?: "legacy" | "2026-07-28" | undefined;
-        persistence?: false | {
-            defaultTtlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-            sqlite?: {
-                ttlCleanupIntervalMs: number;
-                walMode: boolean;
-                path?: string | undefined;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-            } | undefined;
-        } | undefined;
-        providerCaching?: boolean | undefined;
-        eventStore?: {
-            enabled: boolean;
-            provider: "redis" | "sqlite" | "memory";
-            maxEvents: number;
-            ttlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-        } | undefined;
-    };
-    splitByApp: false;
-    __sourceDir?: string | undefined;
-    instructions?: string | undefined;
-    http?: {
-        port: number;
-        entryPath: string;
-        bodyLimit: string | number;
-        hostFactory?: any;
-        socketPath?: string | undefined;
-        cors?: false | {
-            origin?: string | boolean | string[] | ((origin: string | undefined, callback: (err: Error | null, allow?: boolean) => void) => void) | undefined;
-            credentials?: boolean | undefined;
-            maxAge?: number | undefined;
-        } | undefined;
-        security?: {
-            strict?: boolean | undefined;
-            bindAddress?: string | undefined;
-            dnsRebindingProtection?: {
-                enabled?: boolean | undefined;
-                allowedHosts?: string[] | undefined;
-                allowedOrigins?: string[] | undefined;
-            } | undefined;
-        } | undefined;
-        urlencodedLimit?: string | number | undefined;
-        routes?: {
-            method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS" | "HEAD";
-            path: string;
-            handler: import("../common").ServerRequestHandler;
-            auth?: boolean | undefined;
-        }[] | undefined;
-    } | undefined;
-    redis?: {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "vercel-kv";
-        keyPrefix: string;
-        defaultTtlMs: number;
-        url?: string | undefined;
-        token?: string | undefined;
-    } | undefined;
-    pubsub?: {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | undefined;
-    logging?: {
-        level: import("../common").LogLevel;
-        enableConsole: boolean;
-        transports: import("@frontmcp/di").Type<unknown>[];
-        prefix?: string | undefined;
-    } | undefined;
-    pagination?: {
-        tools?: {
-            mode: boolean | "auto";
-            pageSize: number;
-            autoThreshold: number;
-        } | undefined;
-    } | undefined;
-    elicitation?: {
-        enabled: boolean;
-        redis?: {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "vercel-kv";
-            keyPrefix: string;
-            defaultTtlMs: number;
-            url?: string | undefined;
-            token?: string | undefined;
-        } | undefined;
-    } | undefined;
-    skillsConfig?: {
-        enabled: boolean;
-        auth: "inherit" | "public" | "api-key" | "bearer";
-        llmTxt: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        llmFullTxt: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        api: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        mcpResources: boolean;
-        sep2640InInstructions: boolean;
-        injectInstructions: "replace" | "off" | "append" | "prepend";
-        prefix?: string | undefined;
-        apiKeys?: string[] | undefined;
-        jwt?: {
-            issuer: string;
-            audience?: string | undefined;
-            jwksUrl?: string | undefined;
-        } | undefined;
-        cache?: {
-            enabled: boolean;
-            ttlMs: number;
-            redis?: {
-                provider: "redis" | "vercel-kv" | "@vercel/kv";
-                host?: string | undefined;
-                port?: number | undefined;
-                password?: string | undefined;
-                db?: number | undefined;
-            } | undefined;
-            keyPrefix?: string | undefined;
-        } | undefined;
-        audit?: {
-            enabled: boolean;
-            signer?: unknown;
-            store?: unknown;
-            subjectMode?: "plain" | "hash" | "omit" | undefined;
-            headAnchorIntervalMs?: number | undefined;
-        } | undefined;
-        scoring?: "cosine" | "bm25" | undefined;
-    } | undefined;
-    extApps?: {
-        enabled: boolean;
-        hostCapabilities?: {
-            serverToolProxy?: boolean | undefined;
-            openLink?: boolean | undefined;
-            modelContextUpdate?: boolean | undefined;
-            widgetTools?: boolean | undefined;
-            displayModes?: ("inline" | "fullscreen" | "pip")[] | undefined;
-            logging?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    sqlite?: {
-        ttlCleanupIntervalMs: number;
-        walMode: boolean;
-        path?: string | undefined;
-        encryption?: {
-            secret: string;
-        } | undefined;
-    } | undefined;
-    ui?: {
-        cdnOverrides?: Record<string, string> | undefined;
-    } | undefined;
-    output?: {
-        allowNonFinite?: boolean | undefined;
-        schemaMode?: "description" | "definition" | "both" | "none" | undefined;
-        schemaDescriptionFormat?: "summary" | "jsonSchema" | undefined;
-    } | undefined;
-    jobs?: {
-        enabled: boolean;
-        store?: {
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-            keyPrefix?: string | undefined;
-        } | undefined;
-    } | undefined;
-    loader?: {
-        url?: string | undefined;
-        registryUrl?: string | undefined;
-        token?: string | undefined;
-        tokenEnvVar?: string | undefined;
-    } | undefined;
-    throttle?: {
-        enabled: boolean;
-        keyPrefix: string;
-        storage?: {
-            [x: string]: unknown;
-        } | undefined;
-        global?: {
-            maxRequests: number;
-            windowMs: number;
-            partitionBy: "session" | "global" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string) | "ip" | "userId";
-        } | undefined;
-        globalConcurrency?: {
-            maxConcurrent: number;
-            queueTimeoutMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultRateLimit?: {
-            maxRequests: number;
-            windowMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultConcurrency?: {
-            maxConcurrent: number;
-            queueTimeoutMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultTimeout?: {
-            executeMs: number;
-        } | undefined;
-        ipFilter?: {
-            defaultAction: "allow" | "deny";
-            trustProxy: boolean;
-            trustedProxyDepth: number;
-            allowList?: string[] | undefined;
-            denyList?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    observability?: boolean | {
-        tracing?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-        logging?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-        requestLogs?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-    } | undefined;
-    health?: {
-        enabled: boolean;
-        healthzPath: string;
-        readyzPath: string;
-        probes: any[];
-        includeDetails?: boolean | undefined;
-        readyz?: {
-            timeoutMs: number;
-            enabled?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    metrics?: {
-        enabled: boolean;
-        path: string;
-        format: "json" | "prometheus";
-        auth: "token" | "public" | {
-            token: string;
-        };
-        tokenEnv: string;
-        include?: ("auth" | "http" | "tools" | "resources" | "skills" | "process" | "storage" | "sessions")[] | undefined;
-        process?: {
-            eventLoopLag?: boolean | undefined;
-            fdCount?: boolean | undefined;
-            activeHandles?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    channels?: {
-        enabled: boolean;
-        defaultMeta?: Record<string, string> | undefined;
-    } | undefined;
-    authorities?: {
-        claimsMapping?: Record<string, string | undefined> | undefined;
-        profiles?: Record<string, {
-            [x: string]: unknown;
-        }> | undefined;
-        relationshipResolver?: any;
-        evaluators?: Record<string, any> | undefined;
-        claimsResolver?: any;
-        scopeMapping?: {
-            roles?: Record<string, string[]> | undefined;
-            permissions?: Record<string, string[]> | undefined;
-            profiles?: Record<string, string[]> | undefined;
-        } | undefined;
-        pipes?: any[] | undefined;
-    } | undefined;
-    tasks?: {
-        enabled?: boolean | undefined;
-        redis?: {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "vercel-kv";
-            keyPrefix: string;
-            defaultTtlMs: number;
-            url?: string | undefined;
-            token?: string | undefined;
-        } | undefined;
-        keyPrefix?: string | undefined;
-        defaultTtlMs?: number | undefined;
-        maxTtlMs?: number | undefined;
-        defaultPollIntervalMs?: number | undefined;
-        maxConcurrentPerSession?: number | undefined;
-        strict?: boolean | undefined;
-        runner?: "in-process" | "cli" | undefined;
-        sqlite?: {
-            path: string;
-            encryption?: {
-                secret: string;
-            } | undefined;
-            walMode?: boolean | undefined;
-            ttlCleanupIntervalMs?: number | undefined;
-        } | undefined;
-        cliRunnerCommand?: {
-            exe: string;
-            args?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    auth?: {
-        mode: "public";
-        sessionTtl: number;
-        anonymousScopes: string[];
-        issuer?: string | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        jwks?: {
-            keys: import("libs/auth/dist/common/jwt.types").JWK[];
-        } | undefined;
-        signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-    } | {
-        requiredScopes: string[];
-        allowAnonymous: boolean;
-        anonymousScopes: string[];
-        provider: string;
-        mode: "transparent";
-        expectedAudience?: string | string[] | undefined;
-        requireAudience?: boolean | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    } | {
-        requireEmail: boolean;
-        anonymousSubject: string;
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        mode: "local";
-        login?: {
-            title?: string | undefined;
-            subtitle?: string | undefined;
-            logoUri?: string | undefined;
-            fields?: Record<string, {
-                type: "text" | "email" | "password" | "select" | "hidden";
-                label?: string | undefined;
-                required?: boolean | undefined;
-                placeholder?: string | undefined;
-                options?: {
-                    value: string;
-                    label: string;
-                }[] | undefined;
-            }> | undefined;
-            render?: ((ctx: import("libs/auth/dist/options/interfaces").LoginRenderContext) => string) | undefined;
-            subject?: {
-                fromField?: string | undefined;
-                strategy?: "per-session" | "per-account" | undefined;
-            } | undefined;
-        } | undefined;
-        authenticate?: import("libs/auth/dist/options/interfaces").AuthenticateFn | undefined;
-        providers?: {
-            id: string;
-            clientId: string;
-            name?: string | undefined;
-            authorizationEndpoint?: string | undefined;
-            authorizeUrl?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            tokenUrl?: string | undefined;
-            clientSecret?: string | undefined;
-            scopes?: string[] | undefined;
-            userInfoEndpoint?: string | undefined;
-            jwksUri?: string | undefined;
-        }[] | undefined;
-        dcr?: {
-            enabled?: boolean | undefined;
-            allowedRedirectUris?: string[] | undefined;
-            allowedClientIds?: string[] | undefined;
-            initialAccessToken?: string | undefined;
-            clients?: {
-                clientId: string;
-                redirectUris: string[];
-                tokenEndpointAuthMethod: "none" | "client_secret_basic" | "client_secret_post";
-                grantTypes: ("authorization_code" | "refresh_token")[];
-                responseTypes: "code"[];
-                clientSecret?: string | undefined;
-                clientName?: string | undefined;
-                scope?: string | undefined;
-            }[] | undefined;
-            maxDynamicClients?: number | undefined;
-        } | undefined;
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-    } | {
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        provider: string;
-        mode: "remote";
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    } | undefined;
-} | {
-    info: {
-        name: string;
-        version: string;
-        title?: string | undefined;
-        websiteUrl?: string | undefined;
-        icons?: {
-            src: string;
-            mimeType?: string | undefined;
-            sizes?: string[] | undefined;
-            theme?: "light" | "dark" | undefined;
-        }[] | undefined;
-    };
-    providers: import("@frontmcp/di").Type<unknown>[];
-    tools: (string | import("@frontmcp/di").Type<unknown>)[];
-    resources: import("@frontmcp/di").Type<unknown>[];
-    skills: import("@frontmcp/di").Type<unknown>[];
-    plugins: import("@frontmcp/di").Type<unknown>[];
-    apps: import("@frontmcp/di").Type<unknown>[];
-    serve: boolean;
-    transport: {
-        sessionMode: "stateful" | "stateless" | import("zod/v4/core").$InferOuterFunctionType<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>;
-        protocol: "modern" | "legacy" | "stateless-api" | "full" | {
-            sse?: boolean | undefined;
-            streamable?: boolean | undefined;
-            json?: boolean | undefined;
-            stateless?: boolean | undefined;
-            legacy?: boolean | undefined;
-            strictSession?: boolean | undefined;
-        };
-        distributedMode: boolean | "auto";
-        platformDetection?: {
-            customOnly: boolean;
-            mappings?: {
-                pattern: string | RegExp;
-                platform: "unknown" | "continue" | "openai" | "claude" | "gemini" | "cursor" | "cody" | "generic-mcp" | "ext-apps";
-            }[] | undefined;
-        } | undefined;
-        defaultProtocolVersion?: "legacy" | "2026-07-28" | undefined;
-        persistence?: false | {
-            defaultTtlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-            sqlite?: {
-                ttlCleanupIntervalMs: number;
-                walMode: boolean;
-                path?: string | undefined;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-            } | undefined;
-        } | undefined;
-        providerCaching?: boolean | undefined;
-        eventStore?: {
-            enabled: boolean;
-            provider: "redis" | "sqlite" | "memory";
-            maxEvents: number;
-            ttlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-        } | undefined;
-    };
-    splitByApp: true;
-    __sourceDir?: string | undefined;
-    instructions?: string | undefined;
-    http?: {
-        port: number;
-        entryPath: string;
-        bodyLimit: string | number;
-        hostFactory?: any;
-        socketPath?: string | undefined;
-        cors?: false | {
-            origin?: string | boolean | string[] | ((origin: string | undefined, callback: (err: Error | null, allow?: boolean) => void) => void) | undefined;
-            credentials?: boolean | undefined;
-            maxAge?: number | undefined;
-        } | undefined;
-        security?: {
-            strict?: boolean | undefined;
-            bindAddress?: string | undefined;
-            dnsRebindingProtection?: {
-                enabled?: boolean | undefined;
-                allowedHosts?: string[] | undefined;
-                allowedOrigins?: string[] | undefined;
-            } | undefined;
-        } | undefined;
-        urlencodedLimit?: string | number | undefined;
-        routes?: {
-            method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS" | "HEAD";
-            path: string;
-            handler: import("../common").ServerRequestHandler;
-            auth?: boolean | undefined;
-        }[] | undefined;
-    } | undefined;
-    redis?: {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "vercel-kv";
-        keyPrefix: string;
-        defaultTtlMs: number;
-        url?: string | undefined;
-        token?: string | undefined;
-    } | undefined;
-    pubsub?: {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | undefined;
-    logging?: {
-        level: import("../common").LogLevel;
-        enableConsole: boolean;
-        transports: import("@frontmcp/di").Type<unknown>[];
-        prefix?: string | undefined;
-    } | undefined;
-    pagination?: {
-        tools?: {
-            mode: boolean | "auto";
-            pageSize: number;
-            autoThreshold: number;
-        } | undefined;
-    } | undefined;
-    elicitation?: {
-        enabled: boolean;
-        redis?: {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "vercel-kv";
-            keyPrefix: string;
-            defaultTtlMs: number;
-            url?: string | undefined;
-            token?: string | undefined;
-        } | undefined;
-    } | undefined;
-    skillsConfig?: {
-        enabled: boolean;
-        auth: "inherit" | "public" | "api-key" | "bearer";
-        llmTxt: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        llmFullTxt: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        api: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        mcpResources: boolean;
-        sep2640InInstructions: boolean;
-        injectInstructions: "replace" | "off" | "append" | "prepend";
-        prefix?: string | undefined;
-        apiKeys?: string[] | undefined;
-        jwt?: {
-            issuer: string;
-            audience?: string | undefined;
-            jwksUrl?: string | undefined;
-        } | undefined;
-        cache?: {
-            enabled: boolean;
-            ttlMs: number;
-            redis?: {
-                provider: "redis" | "vercel-kv" | "@vercel/kv";
-                host?: string | undefined;
-                port?: number | undefined;
-                password?: string | undefined;
-                db?: number | undefined;
-            } | undefined;
-            keyPrefix?: string | undefined;
-        } | undefined;
-        audit?: {
-            enabled: boolean;
-            signer?: unknown;
-            store?: unknown;
-            subjectMode?: "plain" | "hash" | "omit" | undefined;
-            headAnchorIntervalMs?: number | undefined;
-        } | undefined;
-        scoring?: "cosine" | "bm25" | undefined;
-    } | undefined;
-    extApps?: {
-        enabled: boolean;
-        hostCapabilities?: {
-            serverToolProxy?: boolean | undefined;
-            openLink?: boolean | undefined;
-            modelContextUpdate?: boolean | undefined;
-            widgetTools?: boolean | undefined;
-            displayModes?: ("inline" | "fullscreen" | "pip")[] | undefined;
-            logging?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    sqlite?: {
-        ttlCleanupIntervalMs: number;
-        walMode: boolean;
-        path?: string | undefined;
-        encryption?: {
-            secret: string;
-        } | undefined;
-    } | undefined;
-    ui?: {
-        cdnOverrides?: Record<string, string> | undefined;
-    } | undefined;
-    output?: {
-        allowNonFinite?: boolean | undefined;
-        schemaMode?: "description" | "definition" | "both" | "none" | undefined;
-        schemaDescriptionFormat?: "summary" | "jsonSchema" | undefined;
-    } | undefined;
-    jobs?: {
-        enabled: boolean;
-        store?: {
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-            keyPrefix?: string | undefined;
-        } | undefined;
-    } | undefined;
-    loader?: {
-        url?: string | undefined;
-        registryUrl?: string | undefined;
-        token?: string | undefined;
-        tokenEnvVar?: string | undefined;
-    } | undefined;
-    throttle?: {
-        enabled: boolean;
-        keyPrefix: string;
-        storage?: {
-            [x: string]: unknown;
-        } | undefined;
-        global?: {
-            maxRequests: number;
-            windowMs: number;
-            partitionBy: "session" | "global" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string) | "ip" | "userId";
-        } | undefined;
-        globalConcurrency?: {
-            maxConcurrent: number;
-            queueTimeoutMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultRateLimit?: {
-            maxRequests: number;
-            windowMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultConcurrency?: {
-            maxConcurrent: number;
-            queueTimeoutMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultTimeout?: {
-            executeMs: number;
-        } | undefined;
-        ipFilter?: {
-            defaultAction: "allow" | "deny";
-            trustProxy: boolean;
-            trustedProxyDepth: number;
-            allowList?: string[] | undefined;
-            denyList?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    observability?: boolean | {
-        tracing?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-        logging?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-        requestLogs?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-    } | undefined;
-    health?: {
-        enabled: boolean;
-        healthzPath: string;
-        readyzPath: string;
-        probes: any[];
-        includeDetails?: boolean | undefined;
-        readyz?: {
-            timeoutMs: number;
-            enabled?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    metrics?: {
-        enabled: boolean;
-        path: string;
-        format: "json" | "prometheus";
-        auth: "token" | "public" | {
-            token: string;
-        };
-        tokenEnv: string;
-        include?: ("auth" | "http" | "tools" | "resources" | "skills" | "process" | "storage" | "sessions")[] | undefined;
-        process?: {
-            eventLoopLag?: boolean | undefined;
-            fdCount?: boolean | undefined;
-            activeHandles?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    channels?: {
-        enabled: boolean;
-        defaultMeta?: Record<string, string> | undefined;
-    } | undefined;
-    authorities?: {
-        claimsMapping?: Record<string, string | undefined> | undefined;
-        profiles?: Record<string, {
-            [x: string]: unknown;
-        }> | undefined;
-        relationshipResolver?: any;
-        evaluators?: Record<string, any> | undefined;
-        claimsResolver?: any;
-        scopeMapping?: {
-            roles?: Record<string, string[]> | undefined;
-            permissions?: Record<string, string[]> | undefined;
-            profiles?: Record<string, string[]> | undefined;
-        } | undefined;
-        pipes?: any[] | undefined;
-    } | undefined;
-    tasks?: {
-        enabled?: boolean | undefined;
-        redis?: {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "vercel-kv";
-            keyPrefix: string;
-            defaultTtlMs: number;
-            url?: string | undefined;
-            token?: string | undefined;
-        } | undefined;
-        keyPrefix?: string | undefined;
-        defaultTtlMs?: number | undefined;
-        maxTtlMs?: number | undefined;
-        defaultPollIntervalMs?: number | undefined;
-        maxConcurrentPerSession?: number | undefined;
-        strict?: boolean | undefined;
-        runner?: "in-process" | "cli" | undefined;
-        sqlite?: {
-            path: string;
-            encryption?: {
-                secret: string;
-            } | undefined;
-            walMode?: boolean | undefined;
-            ttlCleanupIntervalMs?: number | undefined;
-        } | undefined;
-        cliRunnerCommand?: {
-            exe: string;
-            args?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    auth?: {
-        mode: "public";
-        sessionTtl: number;
-        anonymousScopes: string[];
-        issuer?: string | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        jwks?: {
-            keys: import("libs/auth/dist/common/jwt.types").JWK[];
-        } | undefined;
-        signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-    } | {
-        requiredScopes: string[];
-        allowAnonymous: boolean;
-        anonymousScopes: string[];
-        provider: string;
-        mode: "transparent";
-        expectedAudience?: string | string[] | undefined;
-        requireAudience?: boolean | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    } | {
-        requireEmail: boolean;
-        anonymousSubject: string;
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        mode: "local";
-        login?: {
-            title?: string | undefined;
-            subtitle?: string | undefined;
-            logoUri?: string | undefined;
-            fields?: Record<string, {
-                type: "text" | "email" | "password" | "select" | "hidden";
-                label?: string | undefined;
-                required?: boolean | undefined;
-                placeholder?: string | undefined;
-                options?: {
-                    value: string;
-                    label: string;
-                }[] | undefined;
-            }> | undefined;
-            render?: ((ctx: import("libs/auth/dist/options/interfaces").LoginRenderContext) => string) | undefined;
-            subject?: {
-                fromField?: string | undefined;
-                strategy?: "per-session" | "per-account" | undefined;
-            } | undefined;
-        } | undefined;
-        authenticate?: import("libs/auth/dist/options/interfaces").AuthenticateFn | undefined;
-        providers?: {
-            id: string;
-            clientId: string;
-            name?: string | undefined;
-            authorizationEndpoint?: string | undefined;
-            authorizeUrl?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            tokenUrl?: string | undefined;
-            clientSecret?: string | undefined;
-            scopes?: string[] | undefined;
-            userInfoEndpoint?: string | undefined;
-            jwksUri?: string | undefined;
-        }[] | undefined;
-        dcr?: {
-            enabled?: boolean | undefined;
-            allowedRedirectUris?: string[] | undefined;
-            allowedClientIds?: string[] | undefined;
-            initialAccessToken?: string | undefined;
-            clients?: {
-                clientId: string;
-                redirectUris: string[];
-                tokenEndpointAuthMethod: "none" | "client_secret_basic" | "client_secret_post";
-                grantTypes: ("authorization_code" | "refresh_token")[];
-                responseTypes: "code"[];
-                clientSecret?: string | undefined;
-                clientName?: string | undefined;
-                scope?: string | undefined;
-            }[] | undefined;
-            maxDynamicClients?: number | undefined;
-        } | undefined;
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-    } | {
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        provider: string;
-        mode: "remote";
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    } | undefined;
-}> | import("../common").ProviderFactoryType<FrontMcpServer, readonly [import("@frontmcp/di").Reference<{
-    info: {
-        name: string;
-        version: string;
-        title?: string | undefined;
-        websiteUrl?: string | undefined;
-        icons?: {
-            src: string;
-            mimeType?: string | undefined;
-            sizes?: string[] | undefined;
-            theme?: "light" | "dark" | undefined;
-        }[] | undefined;
-    };
-    providers: import("@frontmcp/di").Type<unknown>[];
-    tools: (string | import("@frontmcp/di").Type<unknown>)[];
-    resources: import("@frontmcp/di").Type<unknown>[];
-    skills: import("@frontmcp/di").Type<unknown>[];
-    plugins: import("@frontmcp/di").Type<unknown>[];
-    apps: import("@frontmcp/di").Type<unknown>[];
-    serve: boolean;
-    transport: {
-        sessionMode: "stateful" | "stateless" | import("zod/v4/core").$InferOuterFunctionType<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>;
-        protocol: "modern" | "legacy" | "stateless-api" | "full" | {
-            sse?: boolean | undefined;
-            streamable?: boolean | undefined;
-            json?: boolean | undefined;
-            stateless?: boolean | undefined;
-            legacy?: boolean | undefined;
-            strictSession?: boolean | undefined;
-        };
-        distributedMode: boolean | "auto";
-        platformDetection?: {
-            customOnly: boolean;
-            mappings?: {
-                pattern: string | RegExp;
-                platform: "unknown" | "continue" | "openai" | "claude" | "gemini" | "cursor" | "cody" | "generic-mcp" | "ext-apps";
-            }[] | undefined;
-        } | undefined;
-        defaultProtocolVersion?: "legacy" | "2026-07-28" | undefined;
-        persistence?: false | {
-            defaultTtlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-            sqlite?: {
-                ttlCleanupIntervalMs: number;
-                walMode: boolean;
-                path?: string | undefined;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-            } | undefined;
-        } | undefined;
-        providerCaching?: boolean | undefined;
-        eventStore?: {
-            enabled: boolean;
-            provider: "redis" | "sqlite" | "memory";
-            maxEvents: number;
-            ttlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-        } | undefined;
-    };
-    splitByApp: false;
-    __sourceDir?: string | undefined;
-    instructions?: string | undefined;
-    http?: {
-        port: number;
-        entryPath: string;
-        bodyLimit: string | number;
-        hostFactory?: any;
-        socketPath?: string | undefined;
-        cors?: false | {
-            origin?: string | boolean | string[] | ((origin: string | undefined, callback: (err: Error | null, allow?: boolean) => void) => void) | undefined;
-            credentials?: boolean | undefined;
-            maxAge?: number | undefined;
-        } | undefined;
-        security?: {
-            strict?: boolean | undefined;
-            bindAddress?: string | undefined;
-            dnsRebindingProtection?: {
-                enabled?: boolean | undefined;
-                allowedHosts?: string[] | undefined;
-                allowedOrigins?: string[] | undefined;
-            } | undefined;
-        } | undefined;
-        urlencodedLimit?: string | number | undefined;
-        routes?: {
-            method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS" | "HEAD";
-            path: string;
-            handler: import("../common").ServerRequestHandler;
-            auth?: boolean | undefined;
-        }[] | undefined;
-    } | undefined;
-    redis?: {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "vercel-kv";
-        keyPrefix: string;
-        defaultTtlMs: number;
-        url?: string | undefined;
-        token?: string | undefined;
-    } | undefined;
-    pubsub?: {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | undefined;
-    logging?: {
-        level: import("../common").LogLevel;
-        enableConsole: boolean;
-        transports: import("@frontmcp/di").Type<unknown>[];
-        prefix?: string | undefined;
-    } | undefined;
-    pagination?: {
-        tools?: {
-            mode: boolean | "auto";
-            pageSize: number;
-            autoThreshold: number;
-        } | undefined;
-    } | undefined;
-    elicitation?: {
-        enabled: boolean;
-        redis?: {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "vercel-kv";
-            keyPrefix: string;
-            defaultTtlMs: number;
-            url?: string | undefined;
-            token?: string | undefined;
-        } | undefined;
-    } | undefined;
-    skillsConfig?: {
-        enabled: boolean;
-        auth: "inherit" | "public" | "api-key" | "bearer";
-        llmTxt: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        llmFullTxt: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        api: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        mcpResources: boolean;
-        sep2640InInstructions: boolean;
-        injectInstructions: "replace" | "off" | "append" | "prepend";
-        prefix?: string | undefined;
-        apiKeys?: string[] | undefined;
-        jwt?: {
-            issuer: string;
-            audience?: string | undefined;
-            jwksUrl?: string | undefined;
-        } | undefined;
-        cache?: {
-            enabled: boolean;
-            ttlMs: number;
-            redis?: {
-                provider: "redis" | "vercel-kv" | "@vercel/kv";
-                host?: string | undefined;
-                port?: number | undefined;
-                password?: string | undefined;
-                db?: number | undefined;
-            } | undefined;
-            keyPrefix?: string | undefined;
-        } | undefined;
-        audit?: {
-            enabled: boolean;
-            signer?: unknown;
-            store?: unknown;
-            subjectMode?: "plain" | "hash" | "omit" | undefined;
-            headAnchorIntervalMs?: number | undefined;
-        } | undefined;
-        scoring?: "cosine" | "bm25" | undefined;
-    } | undefined;
-    extApps?: {
-        enabled: boolean;
-        hostCapabilities?: {
-            serverToolProxy?: boolean | undefined;
-            openLink?: boolean | undefined;
-            modelContextUpdate?: boolean | undefined;
-            widgetTools?: boolean | undefined;
-            displayModes?: ("inline" | "fullscreen" | "pip")[] | undefined;
-            logging?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    sqlite?: {
-        ttlCleanupIntervalMs: number;
-        walMode: boolean;
-        path?: string | undefined;
-        encryption?: {
-            secret: string;
-        } | undefined;
-    } | undefined;
-    ui?: {
-        cdnOverrides?: Record<string, string> | undefined;
-    } | undefined;
-    output?: {
-        allowNonFinite?: boolean | undefined;
-        schemaMode?: "description" | "definition" | "both" | "none" | undefined;
-        schemaDescriptionFormat?: "summary" | "jsonSchema" | undefined;
-    } | undefined;
-    jobs?: {
-        enabled: boolean;
-        store?: {
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-            keyPrefix?: string | undefined;
-        } | undefined;
-    } | undefined;
-    loader?: {
-        url?: string | undefined;
-        registryUrl?: string | undefined;
-        token?: string | undefined;
-        tokenEnvVar?: string | undefined;
-    } | undefined;
-    throttle?: {
-        enabled: boolean;
-        keyPrefix: string;
-        storage?: {
-            [x: string]: unknown;
-        } | undefined;
-        global?: {
-            maxRequests: number;
-            windowMs: number;
-            partitionBy: "session" | "global" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string) | "ip" | "userId";
-        } | undefined;
-        globalConcurrency?: {
-            maxConcurrent: number;
-            queueTimeoutMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultRateLimit?: {
-            maxRequests: number;
-            windowMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultConcurrency?: {
-            maxConcurrent: number;
-            queueTimeoutMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultTimeout?: {
-            executeMs: number;
-        } | undefined;
-        ipFilter?: {
-            defaultAction: "allow" | "deny";
-            trustProxy: boolean;
-            trustedProxyDepth: number;
-            allowList?: string[] | undefined;
-            denyList?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    observability?: boolean | {
-        tracing?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-        logging?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-        requestLogs?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-    } | undefined;
-    health?: {
-        enabled: boolean;
-        healthzPath: string;
-        readyzPath: string;
-        probes: any[];
-        includeDetails?: boolean | undefined;
-        readyz?: {
-            timeoutMs: number;
-            enabled?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    metrics?: {
-        enabled: boolean;
-        path: string;
-        format: "json" | "prometheus";
-        auth: "token" | "public" | {
-            token: string;
-        };
-        tokenEnv: string;
-        include?: ("auth" | "http" | "tools" | "resources" | "skills" | "process" | "storage" | "sessions")[] | undefined;
-        process?: {
-            eventLoopLag?: boolean | undefined;
-            fdCount?: boolean | undefined;
-            activeHandles?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    channels?: {
-        enabled: boolean;
-        defaultMeta?: Record<string, string> | undefined;
-    } | undefined;
-    authorities?: {
-        claimsMapping?: Record<string, string | undefined> | undefined;
-        profiles?: Record<string, {
-            [x: string]: unknown;
-        }> | undefined;
-        relationshipResolver?: any;
-        evaluators?: Record<string, any> | undefined;
-        claimsResolver?: any;
-        scopeMapping?: {
-            roles?: Record<string, string[]> | undefined;
-            permissions?: Record<string, string[]> | undefined;
-            profiles?: Record<string, string[]> | undefined;
-        } | undefined;
-        pipes?: any[] | undefined;
-    } | undefined;
-    tasks?: {
-        enabled?: boolean | undefined;
-        redis?: {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "vercel-kv";
-            keyPrefix: string;
-            defaultTtlMs: number;
-            url?: string | undefined;
-            token?: string | undefined;
-        } | undefined;
-        keyPrefix?: string | undefined;
-        defaultTtlMs?: number | undefined;
-        maxTtlMs?: number | undefined;
-        defaultPollIntervalMs?: number | undefined;
-        maxConcurrentPerSession?: number | undefined;
-        strict?: boolean | undefined;
-        runner?: "in-process" | "cli" | undefined;
-        sqlite?: {
-            path: string;
-            encryption?: {
-                secret: string;
-            } | undefined;
-            walMode?: boolean | undefined;
-            ttlCleanupIntervalMs?: number | undefined;
-        } | undefined;
-        cliRunnerCommand?: {
-            exe: string;
-            args?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    auth?: {
-        mode: "public";
-        sessionTtl: number;
-        anonymousScopes: string[];
-        issuer?: string | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        jwks?: {
-            keys: import("libs/auth/dist/common/jwt.types").JWK[];
-        } | undefined;
-        signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-    } | {
-        requiredScopes: string[];
-        allowAnonymous: boolean;
-        anonymousScopes: string[];
-        provider: string;
-        mode: "transparent";
-        expectedAudience?: string | string[] | undefined;
-        requireAudience?: boolean | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    } | {
-        requireEmail: boolean;
-        anonymousSubject: string;
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        mode: "local";
-        login?: {
-            title?: string | undefined;
-            subtitle?: string | undefined;
-            logoUri?: string | undefined;
-            fields?: Record<string, {
-                type: "text" | "email" | "password" | "select" | "hidden";
-                label?: string | undefined;
-                required?: boolean | undefined;
-                placeholder?: string | undefined;
-                options?: {
-                    value: string;
-                    label: string;
-                }[] | undefined;
-            }> | undefined;
-            render?: ((ctx: import("libs/auth/dist/options/interfaces").LoginRenderContext) => string) | undefined;
-            subject?: {
-                fromField?: string | undefined;
-                strategy?: "per-session" | "per-account" | undefined;
-            } | undefined;
-        } | undefined;
-        authenticate?: import("libs/auth/dist/options/interfaces").AuthenticateFn | undefined;
-        providers?: {
-            id: string;
-            clientId: string;
-            name?: string | undefined;
-            authorizationEndpoint?: string | undefined;
-            authorizeUrl?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            tokenUrl?: string | undefined;
-            clientSecret?: string | undefined;
-            scopes?: string[] | undefined;
-            userInfoEndpoint?: string | undefined;
-            jwksUri?: string | undefined;
-        }[] | undefined;
-        dcr?: {
-            enabled?: boolean | undefined;
-            allowedRedirectUris?: string[] | undefined;
-            allowedClientIds?: string[] | undefined;
-            initialAccessToken?: string | undefined;
-            clients?: {
-                clientId: string;
-                redirectUris: string[];
-                tokenEndpointAuthMethod: "none" | "client_secret_basic" | "client_secret_post";
-                grantTypes: ("authorization_code" | "refresh_token")[];
-                responseTypes: "code"[];
-                clientSecret?: string | undefined;
-                clientName?: string | undefined;
-                scope?: string | undefined;
-            }[] | undefined;
-            maxDynamicClients?: number | undefined;
-        } | undefined;
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-    } | {
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        provider: string;
-        mode: "remote";
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    } | undefined;
-} | {
-    info: {
-        name: string;
-        version: string;
-        title?: string | undefined;
-        websiteUrl?: string | undefined;
-        icons?: {
-            src: string;
-            mimeType?: string | undefined;
-            sizes?: string[] | undefined;
-            theme?: "light" | "dark" | undefined;
-        }[] | undefined;
-    };
-    providers: import("@frontmcp/di").Type<unknown>[];
-    tools: (string | import("@frontmcp/di").Type<unknown>)[];
-    resources: import("@frontmcp/di").Type<unknown>[];
-    skills: import("@frontmcp/di").Type<unknown>[];
-    plugins: import("@frontmcp/di").Type<unknown>[];
-    apps: import("@frontmcp/di").Type<unknown>[];
-    serve: boolean;
-    transport: {
-        sessionMode: "stateful" | "stateless" | import("zod/v4/core").$InferOuterFunctionType<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>;
-        protocol: "modern" | "legacy" | "stateless-api" | "full" | {
-            sse?: boolean | undefined;
-            streamable?: boolean | undefined;
-            json?: boolean | undefined;
-            stateless?: boolean | undefined;
-            legacy?: boolean | undefined;
-            strictSession?: boolean | undefined;
-        };
-        distributedMode: boolean | "auto";
-        platformDetection?: {
-            customOnly: boolean;
-            mappings?: {
-                pattern: string | RegExp;
-                platform: "unknown" | "continue" | "openai" | "claude" | "gemini" | "cursor" | "cody" | "generic-mcp" | "ext-apps";
-            }[] | undefined;
-        } | undefined;
-        defaultProtocolVersion?: "legacy" | "2026-07-28" | undefined;
-        persistence?: false | {
-            defaultTtlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-            sqlite?: {
-                ttlCleanupIntervalMs: number;
-                walMode: boolean;
-                path?: string | undefined;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-            } | undefined;
-        } | undefined;
-        providerCaching?: boolean | undefined;
-        eventStore?: {
-            enabled: boolean;
-            provider: "redis" | "sqlite" | "memory";
-            maxEvents: number;
-            ttlMs: number;
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-        } | undefined;
-    };
-    splitByApp: true;
-    __sourceDir?: string | undefined;
-    instructions?: string | undefined;
-    http?: {
-        port: number;
-        entryPath: string;
-        bodyLimit: string | number;
-        hostFactory?: any;
-        socketPath?: string | undefined;
-        cors?: false | {
-            origin?: string | boolean | string[] | ((origin: string | undefined, callback: (err: Error | null, allow?: boolean) => void) => void) | undefined;
-            credentials?: boolean | undefined;
-            maxAge?: number | undefined;
-        } | undefined;
-        security?: {
-            strict?: boolean | undefined;
-            bindAddress?: string | undefined;
-            dnsRebindingProtection?: {
-                enabled?: boolean | undefined;
-                allowedHosts?: string[] | undefined;
-                allowedOrigins?: string[] | undefined;
-            } | undefined;
-        } | undefined;
-        urlencodedLimit?: string | number | undefined;
-        routes?: {
-            method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS" | "HEAD";
-            path: string;
-            handler: import("../common").ServerRequestHandler;
-            auth?: boolean | undefined;
-        }[] | undefined;
-    } | undefined;
-    redis?: {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "vercel-kv";
-        keyPrefix: string;
-        defaultTtlMs: number;
-        url?: string | undefined;
-        token?: string | undefined;
-    } | undefined;
-    pubsub?: {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | {
-        provider: "redis";
-        host: string;
-        port: number;
-        db: number;
-        tls: boolean;
-        keyPrefix: string;
-        defaultTtlMs: number;
-        password?: string | undefined;
-    } | undefined;
-    logging?: {
-        level: import("../common").LogLevel;
-        enableConsole: boolean;
-        transports: import("@frontmcp/di").Type<unknown>[];
-        prefix?: string | undefined;
-    } | undefined;
-    pagination?: {
-        tools?: {
-            mode: boolean | "auto";
-            pageSize: number;
-            autoThreshold: number;
-        } | undefined;
-    } | undefined;
-    elicitation?: {
-        enabled: boolean;
-        redis?: {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "vercel-kv";
-            keyPrefix: string;
-            defaultTtlMs: number;
-            url?: string | undefined;
-            token?: string | undefined;
-        } | undefined;
-    } | undefined;
-    skillsConfig?: {
-        enabled: boolean;
-        auth: "inherit" | "public" | "api-key" | "bearer";
-        llmTxt: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        llmFullTxt: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        api: boolean | {
-            enabled: boolean;
-            path?: string | undefined;
-        };
-        mcpResources: boolean;
-        sep2640InInstructions: boolean;
-        injectInstructions: "replace" | "off" | "append" | "prepend";
-        prefix?: string | undefined;
-        apiKeys?: string[] | undefined;
-        jwt?: {
-            issuer: string;
-            audience?: string | undefined;
-            jwksUrl?: string | undefined;
-        } | undefined;
-        cache?: {
-            enabled: boolean;
-            ttlMs: number;
-            redis?: {
-                provider: "redis" | "vercel-kv" | "@vercel/kv";
-                host?: string | undefined;
-                port?: number | undefined;
-                password?: string | undefined;
-                db?: number | undefined;
-            } | undefined;
-            keyPrefix?: string | undefined;
-        } | undefined;
-        audit?: {
-            enabled: boolean;
-            signer?: unknown;
-            store?: unknown;
-            subjectMode?: "plain" | "hash" | "omit" | undefined;
-            headAnchorIntervalMs?: number | undefined;
-        } | undefined;
-        scoring?: "cosine" | "bm25" | undefined;
-    } | undefined;
-    extApps?: {
-        enabled: boolean;
-        hostCapabilities?: {
-            serverToolProxy?: boolean | undefined;
-            openLink?: boolean | undefined;
-            modelContextUpdate?: boolean | undefined;
-            widgetTools?: boolean | undefined;
-            displayModes?: ("inline" | "fullscreen" | "pip")[] | undefined;
-            logging?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    sqlite?: {
-        ttlCleanupIntervalMs: number;
-        walMode: boolean;
-        path?: string | undefined;
-        encryption?: {
-            secret: string;
-        } | undefined;
-    } | undefined;
-    ui?: {
-        cdnOverrides?: Record<string, string> | undefined;
-    } | undefined;
-    output?: {
-        allowNonFinite?: boolean | undefined;
-        schemaMode?: "description" | "definition" | "both" | "none" | undefined;
-        schemaDescriptionFormat?: "summary" | "jsonSchema" | undefined;
-    } | undefined;
-    jobs?: {
-        enabled: boolean;
-        store?: {
-            redis?: {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "redis";
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            } | {
-                provider: "vercel-kv";
-                keyPrefix: string;
-                defaultTtlMs: number;
-                url?: string | undefined;
-                token?: string | undefined;
-            } | undefined;
-            keyPrefix?: string | undefined;
-        } | undefined;
-    } | undefined;
-    loader?: {
-        url?: string | undefined;
-        registryUrl?: string | undefined;
-        token?: string | undefined;
-        tokenEnvVar?: string | undefined;
-    } | undefined;
-    throttle?: {
-        enabled: boolean;
-        keyPrefix: string;
-        storage?: {
-            [x: string]: unknown;
-        } | undefined;
-        global?: {
-            maxRequests: number;
-            windowMs: number;
-            partitionBy: "session" | "global" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string) | "ip" | "userId";
-        } | undefined;
-        globalConcurrency?: {
-            maxConcurrent: number;
-            queueTimeoutMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultRateLimit?: {
-            maxRequests: number;
-            windowMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultConcurrency?: {
-            maxConcurrent: number;
-            queueTimeoutMs: number;
-            partitionBy: "session" | "global" | "ip" | "userId" | ((ctx: {
-                sessionId: string;
-                clientIp?: string;
-                userId?: string;
-            }) => string);
-        } | undefined;
-        defaultTimeout?: {
-            executeMs: number;
-        } | undefined;
-        ipFilter?: {
-            defaultAction: "allow" | "deny";
-            trustProxy: boolean;
-            trustedProxyDepth: number;
-            allowList?: string[] | undefined;
-            denyList?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    observability?: boolean | {
-        tracing?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-        logging?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-        requestLogs?: boolean | {
-            [x: string]: unknown;
-        } | undefined;
-    } | undefined;
-    health?: {
-        enabled: boolean;
-        healthzPath: string;
-        readyzPath: string;
-        probes: any[];
-        includeDetails?: boolean | undefined;
-        readyz?: {
-            timeoutMs: number;
-            enabled?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    metrics?: {
-        enabled: boolean;
-        path: string;
-        format: "json" | "prometheus";
-        auth: "token" | "public" | {
-            token: string;
-        };
-        tokenEnv: string;
-        include?: ("auth" | "http" | "tools" | "resources" | "skills" | "process" | "storage" | "sessions")[] | undefined;
-        process?: {
-            eventLoopLag?: boolean | undefined;
-            fdCount?: boolean | undefined;
-            activeHandles?: boolean | undefined;
-        } | undefined;
-    } | undefined;
-    channels?: {
-        enabled: boolean;
-        defaultMeta?: Record<string, string> | undefined;
-    } | undefined;
-    authorities?: {
-        claimsMapping?: Record<string, string | undefined> | undefined;
-        profiles?: Record<string, {
-            [x: string]: unknown;
-        }> | undefined;
-        relationshipResolver?: any;
-        evaluators?: Record<string, any> | undefined;
-        claimsResolver?: any;
-        scopeMapping?: {
-            roles?: Record<string, string[]> | undefined;
-            permissions?: Record<string, string[]> | undefined;
-            profiles?: Record<string, string[]> | undefined;
-        } | undefined;
-        pipes?: any[] | undefined;
-    } | undefined;
-    tasks?: {
-        enabled?: boolean | undefined;
-        redis?: {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "redis";
-            host: string;
-            port: number;
-            db: number;
-            tls: boolean;
-            keyPrefix: string;
-            defaultTtlMs: number;
-            password?: string | undefined;
-        } | {
-            provider: "vercel-kv";
-            keyPrefix: string;
-            defaultTtlMs: number;
-            url?: string | undefined;
-            token?: string | undefined;
-        } | undefined;
-        keyPrefix?: string | undefined;
-        defaultTtlMs?: number | undefined;
-        maxTtlMs?: number | undefined;
-        defaultPollIntervalMs?: number | undefined;
-        maxConcurrentPerSession?: number | undefined;
-        strict?: boolean | undefined;
-        runner?: "in-process" | "cli" | undefined;
-        sqlite?: {
-            path: string;
-            encryption?: {
-                secret: string;
-            } | undefined;
-            walMode?: boolean | undefined;
-            ttlCleanupIntervalMs?: number | undefined;
-        } | undefined;
-        cliRunnerCommand?: {
-            exe: string;
-            args?: string[] | undefined;
-        } | undefined;
-    } | undefined;
-    auth?: {
-        mode: "public";
-        sessionTtl: number;
-        anonymousScopes: string[];
-        issuer?: string | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        jwks?: {
-            keys: import("libs/auth/dist/common/jwt.types").JWK[];
-        } | undefined;
-        signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-    } | {
-        requiredScopes: string[];
-        allowAnonymous: boolean;
-        anonymousScopes: string[];
-        provider: string;
-        mode: "transparent";
-        expectedAudience?: string | string[] | undefined;
-        requireAudience?: boolean | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    } | {
-        requireEmail: boolean;
-        anonymousSubject: string;
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        mode: "local";
-        login?: {
-            title?: string | undefined;
-            subtitle?: string | undefined;
-            logoUri?: string | undefined;
-            fields?: Record<string, {
-                type: "text" | "email" | "password" | "select" | "hidden";
-                label?: string | undefined;
-                required?: boolean | undefined;
-                placeholder?: string | undefined;
-                options?: {
-                    value: string;
-                    label: string;
-                }[] | undefined;
-            }> | undefined;
-            render?: ((ctx: import("libs/auth/dist/options/interfaces").LoginRenderContext) => string) | undefined;
-            subject?: {
-                fromField?: string | undefined;
-                strategy?: "per-session" | "per-account" | undefined;
-            } | undefined;
-        } | undefined;
-        authenticate?: import("libs/auth/dist/options/interfaces").AuthenticateFn | undefined;
-        providers?: {
-            id: string;
-            clientId: string;
-            name?: string | undefined;
-            authorizationEndpoint?: string | undefined;
-            authorizeUrl?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            tokenUrl?: string | undefined;
-            clientSecret?: string | undefined;
-            scopes?: string[] | undefined;
-            userInfoEndpoint?: string | undefined;
-            jwksUri?: string | undefined;
-        }[] | undefined;
-        dcr?: {
-            enabled?: boolean | undefined;
-            allowedRedirectUris?: string[] | undefined;
-            allowedClientIds?: string[] | undefined;
-            initialAccessToken?: string | undefined;
-            clients?: {
-                clientId: string;
-                redirectUris: string[];
-                tokenEndpointAuthMethod: "none" | "client_secret_basic" | "client_secret_post";
-                grantTypes: ("authorization_code" | "refresh_token")[];
-                responseTypes: "code"[];
-                clientSecret?: string | undefined;
-                clientName?: string | undefined;
-                scope?: string | undefined;
-            }[] | undefined;
-            maxDynamicClients?: number | undefined;
-        } | undefined;
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-    } | {
-        tokenStorage: "memory" | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-        } | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-        };
-        allowDefaultPublic: boolean;
-        anonymousScopes: string[];
-        requireRegisteredClients: boolean;
-        provider: string;
-        mode: "remote";
-        local?: {
-            signKey?: Uint8Array<ArrayBuffer> | import("libs/auth/dist/common/jwt.types").JWK | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            issuer?: string | undefined;
-        } | undefined;
-        secureStore?: "memory" | {
-            sqlite: {
-                path: string;
-                encryption?: {
-                    secret: string;
-                } | undefined;
-                ttlCleanupIntervalMs?: number | undefined;
-                walMode?: boolean | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            redis: {
-                host: string;
-                port: number;
-                db: number;
-                tls: boolean;
-                keyPrefix: string;
-                defaultTtlMs: number;
-                password?: string | undefined;
-            };
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            backend: import("libs/auth/dist/options/interfaces").SecureStoreCustomBackend;
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | {
-            scope?: "user" | "session" | "global" | undefined;
-            ttlMs?: number | undefined;
-            encryption?: {
-                pepper?: string | undefined;
-            } | undefined;
-        } | undefined;
-        publicAccess?: {
-            tools: string[] | "all";
-            prompts: string[] | "all";
-            rateLimit: number;
-        } | undefined;
-        consent?: {
-            enabled: boolean;
-            groupByApp: boolean;
-            showDescriptions: boolean;
-            allowSelectAll: boolean;
-            requireSelection: boolean;
-            rememberConsent: boolean;
-            customMessage?: string | undefined;
-            excludedTools?: string[] | undefined;
-            defaultSelectedTools?: string[] | undefined;
-        } | undefined;
-        federatedAuth?: {
-            stateValidation: "format" | "strict";
-            minProviders?: number | undefined;
-            requiredProviders?: string[] | undefined;
-        } | undefined;
-        refresh?: {
-            enabled: boolean;
-            skewSeconds: number;
-        } | undefined;
-        expectedAudience?: string | string[] | undefined;
-        incrementalAuth?: {
-            enabled: boolean;
-            skippedAppBehavior: "anonymous" | "require-auth";
-            allowSkip: boolean;
-            showAllAppsAtOnce: boolean;
-        } | undefined;
-        cimd?: {
-            enabled: boolean;
-            cache?: {
-                type: "redis" | "memory";
-                defaultTtlMs: number;
-                maxTtlMs: number;
-                minTtlMs: number;
-                redis?: {
-                    keyPrefix: string;
-                    url?: string | undefined;
-                    host?: string | undefined;
-                    port?: number | undefined;
-                    password?: string | undefined;
-                    db?: number | undefined;
-                    tls?: boolean | undefined;
-                } | undefined;
-            } | undefined;
-            security?: {
-                blockPrivateIPs: boolean;
-                warnOnLocalhostRedirects: boolean;
-                allowInsecureForTesting: boolean;
-                allowedDomains?: string[] | undefined;
-                blockedDomains?: string[] | undefined;
-            } | undefined;
-            network?: {
-                timeoutMs: number;
-                maxResponseSizeBytes: number;
-                redirectPolicy: "allow" | "deny" | "same-origin";
-                maxRedirects: number;
-            } | undefined;
-        } | undefined;
-        ui?: Partial<Record<"error" | "login" | "consent" | "incremental" | "federated", string>> | undefined;
-        extras?: Record<string, import("libs/auth/dist/options/interfaces").AuthExtraHandler> | undefined;
-        clientId?: string | undefined;
-        clientSecret?: string | undefined;
-        scopes?: string[] | undefined;
-        providerConfig?: {
-            dcrEnabled: boolean;
-            name?: string | undefined;
-            id?: string | undefined;
-            jwks?: {
-                keys: import("libs/auth/dist/common/jwt.types").JWK[];
-            } | undefined;
-            jwksUri?: string | undefined;
-            additionalIssuers?: string[] | undefined;
-            verifyIssuer?: boolean | undefined;
-            authEndpoint?: string | undefined;
-            tokenEndpoint?: string | undefined;
-            registrationEndpoint?: string | undefined;
-            userInfoEndpoint?: string | undefined;
-        } | undefined;
-    } | undefined;
-}>]> | ProviderValueType<FrontMcpServer>)[];
+import { type FrontMcpConfigType, type ProviderType } from '../common';
+export declare function createMcpGlobalProviders(metadata: FrontMcpConfigType): ProviderType[];
 //# sourceMappingURL=front-mcp.providers.d.ts.map